Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
File: Su-5nSoG7pneqVZvFr8ibbPlbJI.mft (raw, json)
Hash identifier: rxozBTk73pdUX04w2fE21P5657KQXYAh4SswbnkPDK0=
Subject key identifier: 17:FD:05:3F:77:10:FF:FA:13:00:5E:2A:7B:F1:C1:55:A9:9B:81:3F
Authority key identifier: 4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
Certificate issuer: /CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Certificate serial: 0194BC04FC5AF2D0501C6F130E16210A2BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: Su-5nSoG7pneqVZvFr8ibbPlbJI.crl (hash: T8e+4xxMtV8IKDH85hyPaquZFKYHKMKvRbiHAnLQmPg=)
2: zFoJFUnlPbl4jZ_b8xY0tJqEvEA.roa (hash: LdaJGwGlR/sqxaI5NlWcBg7c+O1FzJXWT3jVGiryGW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fc:5a:f2:d0:50:1c:6f:13:0e:16:21:0a:2b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=17fd053f7710fffa13005e2a7bf1c155a99b813f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f1:81:26:6c:83:21:dd:d7:aa:4e:b4:3d:ed:
0d:7a:a1:c7:a8:17:3a:0c:4e:dc:0e:2e:85:af:52:
2f:4a:be:43:5f:1a:58:0a:7d:cd:0f:ea:7e:fa:75:
30:97:dd:5a:9f:27:bb:3a:cd:d6:ba:4e:11:d2:bc:
52:03:17:70:77:8d:54:5e:66:bd:78:c0:b2:de:08:
f9:aa:21:ac:90:51:c5:73:67:f4:0f:03:53:3a:a0:
0d:ff:d8:6d:30:05:da:23:97:b8:35:1f:db:93:73:
fc:9c:47:82:b9:52:e2:f0:47:b5:5e:82:8c:a4:58:
a5:50:16:f7:cc:e7:83:81:c4:6e:11:58:78:7f:5b:
1d:22:6f:f0:46:7b:6f:79:c8:bb:68:49:8d:a7:97:
dd:39:e6:e9:35:3e:fa:c8:60:ce:20:64:5b:e0:47:
d8:83:94:9b:ba:de:09:f5:9d:3e:da:66:3f:4b:18:
a4:28:21:3f:78:48:1d:c6:ef:0d:d1:a3:69:47:c9:
4f:9d:69:fa:22:60:84:fb:7f:43:e3:ef:a1:b8:c2:
86:eb:91:c5:8c:63:8f:b0:17:30:93:f6:a7:00:19:
ca:67:08:d4:2a:7f:5c:64:d0:75:26:09:74:8b:0c:
aa:65:38:70:c1:41:ca:a2:9a:4e:ee:3f:8e:d1:82:
b8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FD:05:3F:77:10:FF:FA:13:00:5E:2A:7B:F1:C1:55:A9:9B:81:3F
X509v3 Authority Key Identifier:
keyid:4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d8:3b:dc:e0:24:f8:57:a7:30:5b:ec:ba:56:60:f0:52:e0:
56:65:1b:d4:84:a2:fd:03:f4:2f:a4:a1:5a:12:b9:eb:a4:d4:
32:50:4d:a1:20:db:2e:44:d9:cd:28:5f:8b:ec:1c:80:5b:65:
c4:d8:53:6e:fb:e9:c9:77:c5:e6:b4:ce:f0:73:94:0e:0e:96:
75:5c:dc:f9:e8:89:73:33:37:74:c7:10:45:61:9c:45:5e:ef:
8c:ca:81:b8:0c:85:90:c1:3d:e7:f5:6c:f0:3b:61:6e:06:33:
62:6a:2c:40:70:52:08:08:bf:7c:f1:89:8d:45:1d:68:3a:b0:
a5:c1:90:9d:b5:67:e5:f1:c7:a4:5d:4e:33:bb:3e:24:cd:b6:
bc:d5:eb:45:c7:04:f7:d4:be:4d:5f:be:f3:1c:ec:86:6d:8e:
f6:2d:81:ac:b9:a8:8c:1c:8d:4f:8d:2c:00:ea:ec:42:16:fd:
91:f7:4b:07:32:47:5d:7f:ec:86:7b:d1:f9:dd:a0:42:dc:e0:
1c:69:ee:d5:cb:3b:b7:c5:64:54:81:0b:2e:46:2f:22:ff:3a:
ff:ba:1c:e3:e5:31:8d:b1:4e:8d:ee:9d:37:af:8c:0e:ce:c0:
86:f0:6e:1a:e5:43:7b:a4:6a:79:f1:98:e7:89:f5:d6:69:a4:
85:0b:01:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:00 2025 by rpki-client